Listen to this Post
How CVE-2025-3799 Works
The vulnerability in WCMS 11 stems from improper input sanitization in the `AnonymousController.php` file. Attackers can exploit the `email/username` parameter to inject malicious SQL queries due to lack of prepared statements or parameterized queries. The application directly concatenates user-supplied input into SQL queries, allowing attackers to manipulate database operations. Remote exploitation is possible without authentication, leading to potential data leakage, modification, or deletion. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) confirms the attack complexity is low, requiring no user interaction.
DailyCVE Form
Platform: WCMS
Version: 11
Vulnerability: SQL Injection
Severity: Critical
Date: 07/15/2025
Prediction: Patch by 08/30/2025
What Undercode Say
SELECT FROM users WHERE email = '[bash]';
$userInput = $_POST['email']; // Unsanitized input $query = "SELECT FROM users WHERE email = '$userInput'";
How Exploit
1. Craft SQL payload in email/username field.
2. Bypass authentication via `’ OR ‘1’=’1`.
3. Exfiltrate database contents with UNION-based attacks.
Protection from this CVE
1. Use prepared statements.
2. Implement input validation.
3. Apply least privilege DB access.
Impact
1. Unauthorized data access.
2. Database compromise.
3. Remote code execution.
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
